Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: bQRpGPA7Xs1NzFO4n6kO0jsudwlrX7+T1bGw2tV0Xkw=
Subject key identifier: 9F:3C:50:E6:0A:E4:4D:A3:61:55:46:96:CC:E3:1A:D6:93:0B:F9:76
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019D28BB9BC0B4BEAB7F6E3AA87FEA9563AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 2QIcbe847T87W4LtWff5vXENWHX8bBCijgkIoj8KGWA=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9b:c0:b4:be:ab:7f:6e:3a:a8:7f:ea:95:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=9f3c50e60ae44da361554696cce31ad6930bf976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:8a:1f:a5:29:1e:67:a8:59:7c:7c:b2:f9:
f4:9c:f1:da:2a:07:ad:de:62:17:0e:a5:3a:05:ac:
6e:e8:ff:ec:f0:8d:7d:f1:da:65:39:f1:19:78:dc:
e4:de:47:a7:87:db:6a:0a:3b:dd:a7:68:d2:e1:d1:
f8:85:5b:f6:ce:ab:a4:ba:33:52:c3:9d:ed:b8:91:
a1:05:fe:46:3c:3c:fd:54:62:0d:2d:42:b2:8c:4d:
51:1e:a8:56:3d:1b:a4:bc:09:45:ad:31:7b:9d:c1:
0d:1c:59:bb:68:7f:8c:97:9d:78:21:fa:8d:e4:b2:
0e:fa:56:39:53:48:a6:a6:48:3e:40:fd:11:d9:5d:
f5:18:da:4a:69:df:ca:3b:ec:f0:d4:bd:97:fc:46:
1a:81:a0:63:a1:e4:7b:e2:cd:ec:20:43:8a:36:59:
dd:e1:73:93:7e:35:67:d4:1a:d0:19:75:45:4b:4a:
df:34:2f:6b:57:45:78:74:6e:e7:42:ac:43:6a:e5:
b7:19:b9:86:ac:4b:e9:b5:dc:73:cb:ba:cf:87:19:
9d:99:41:38:38:c7:fd:ee:f0:d7:af:d7:b9:23:e5:
ea:c7:2b:f5:33:94:c7:c0:18:c1:5d:3d:df:a2:5d:
f1:ed:2f:10:de:ca:02:b3:02:1e:46:bd:5e:f4:d8:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:50:E6:0A:E4:4D:A3:61:55:46:96:CC:E3:1A:D6:93:0B:F9:76
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:2c:f2:32:ce:99:f7:1e:ae:ac:77:fb:88:bf:23:ad:22:
1b:93:c5:06:25:a4:24:67:b7:96:4c:1c:98:29:01:ad:29:95:
58:09:c8:80:13:b2:ca:2b:44:f0:47:36:d3:47:d4:0b:ff:c2:
50:40:17:a2:b1:69:92:8e:d1:6d:19:62:fb:49:1b:f8:9e:8f:
32:85:da:67:39:5d:8f:14:f4:fc:e0:49:09:8a:55:6c:00:40:
03:e7:5d:d0:16:87:78:0e:33:81:1b:a6:ae:af:23:1b:73:e4:
30:9f:63:88:50:40:97:ee:95:f7:fc:71:38:d2:af:37:e3:b8:
12:e3:03:d6:c8:22:53:d5:ce:9d:b4:19:7c:e2:e6:39:51:87:
5f:7d:fc:5e:38:9c:55:f9:63:b7:73:04:4d:c6:aa:c1:96:9a:
c6:37:6f:e8:85:32:b6:25:5a:c2:20:e1:15:ff:de:9b:76:20:
7f:4d:db:00:0d:8e:0d:d9:c7:d2:a3:c7:24:9f:be:d7:9b:26:
b5:b4:a9:ef:04:72:06:92:d9:05:65:55:35:4e:0d:19:00:e4:
df:4e:37:66:10:aa:3d:cf:1f:df:ec:65:46:fa:30:84:02:b2:
f3:6d:d5:22:60:60:d6:cd:a3:27:82:30:53:d4:ac:c7:02:fa:
96:15:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:53 2026 by rpki-client